Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
acb25b5b660fda8aea5ff26f5c1a85934fffdc14edf842c7bd885288feb5b6da.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
acb25b5b660fda8aea5ff26f5c1a85934fffdc14edf842c7bd885288feb5b6da.exe
Resource
win10v2004-20220812-en
Target
acb25b5b660fda8aea5ff26f5c1a85934fffdc14edf842c7bd885288feb5b6da
Size
736KB
MD5
937c566c218e370226313f0845c0d0a0
SHA1
a2533053c76015d0089d51088f5025c0e182e331
SHA256
acb25b5b660fda8aea5ff26f5c1a85934fffdc14edf842c7bd885288feb5b6da
SHA512
775aafdf15a0b13d6c48e0fcf372eb68da44e83e1967e62b6594903f9ebfd09d175e904de094f96eb6626f39d61fc0ee2f894e1200cdb7b4d9b1e710e1826a07
SSDEEP
12288:pGcv5JM1NOIXrZolKwti+LsW4vDEYII1f7Yqxe4zHS0N:xK3Mc0zsJDEYC6HS0N
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
CheckMenuItem
SetRectEmpty
GetSysColorBrush
PostThreadMessageW
SetDeskWallpaper
DragObject
RealGetWindowClassW
EnumDisplayMonitors
ScrollChildren
CascadeWindows
CopyAcceleratorTableW
ToUnicodeEx
SetForegroundWindow
DrawAnimatedRects
GetMessagePos
GetInternalWindowPos
SetMenuItemInfoW
BlockInput
GetMessageExtraInfo
DestroyWindow
CopyAcceleratorTableA
RegisterHotKey
DefWindowProcA
GetKeyState
CallWindowProcA
PrintWindow
EqualRect
GetMenuState
SetWindowRgn
SendMessageCallbackW
SetSystemMenu
ValidateRect
SetMenuContextHelpId
EnumPropsA
DestroyMenu
ShowScrollBar
GetAncestor
CopyIcon
IsDlgButtonChecked
LoadStringW
FlashWindowEx
OpenInputDesktop
BroadcastSystemMessageExW
TileChildWindows
SetWindowPlacement
TranslateAcceleratorW
SetTimer
DlgDirListW
UnregisterClassA
SetPropA
SetMenuDefaultItem
CharUpperA
EnableWindow
IntersectRect
GetWindowWord
GetMenuBarInfo
GetMonitorInfoW
SetCursorPos
GetKeyboardLayout
DefDlgProcW
FindWindowW
SetParent
CharNextExA
OpenDesktopA
UnloadKeyboardLayout
PostMessageA
MapDialogRect
IsWindowVisible
GetTitleBarInfo
GrayStringA
RemovePropA
GetMessageA
GetDlgItemTextW
CreateIconFromResource
AllowForegroundActivation
ShowCaret
IsIconic
DrawTextExA
GetCaretBlinkTime
ChangeMenuW
ChangeDisplaySettingsA
DestroyAcceleratorTable
ReleaseCapture
IsCharLowerA
GetMenuItemInfoA
GetClassInfoA
GetInputDesktop
PeekMessageW
IsCharAlphaA
IsCharLowerW
PostThreadMessageA
EnumDisplaySettingsExW
OemToCharA
wvsprintfW
CreateDialogParamA
DeleteMenu
UnionRect
InvalidateRect
GetWindowLongW
GetMenuStringW
GetClassWord
UnregisterClassW
EnableScrollBar
SetMenuInfo
WindowFromDC
GetSysColor
CloseWindowStation
GetMenu
PrivateExtractIconExA
GetWindowTextLengthA
SendDlgItemMessageW
GetClipboardFormatNameA
SetWindowWord
SetScrollRange
IsDialogMessageA
CharUpperBuffW
MessageBoxW
CreateDialogIndirectParamA
IsZoomed
GetMenuDefaultItem
ChildWindowFromPoint
LoadIconA
DragDetect
CharLowerA
AppendMenuA
LoadCursorW
SetDlgItemTextA
FlashWindow
SetMessageExtraInfo
FindWindowA
LoadImageA
IsMenu
GetNextDlgGroupItem
SetInternalWindowPos
GetDCEx
SendNotifyMessageA
TranslateMessage
MessageBoxExA
PaintDesktop
GetMouseMovePointsEx
GetMenuItemID
LoadStringA
EnumDesktopsA
GetKeyboardLayoutNameW
SendMessageCallbackA
IsCharAlphaNumericW
SetMenuItemInfoA
GetMenuItemRect
OemToCharBuffA
UnlockWindowStation
GetClassInfoExA
PostQuitMessage
MapVirtualKeyA
FillRect
GetMenuItemCount
MenuWindowProcW
DrawStateA
ChangeMenuA
DrawFrameControl
GetClassLongW
ScrollWindow
SetKeyboardState
SetWindowPos
GetKeyboardType
LoadIconW
CreateCaret
SetThreadDesktop
IsWindow
OpenDesktopW
CreateDialogIndirectParamW
EmptyClipboard
GetWindowRgnBox
DrawTextExW
MessageBoxTimeoutA
RegisterClassExA
EndPaint
CharNextA
EnumDisplaySettingsW
InsertMenuItemW
GetPropA
DrawTextW
DialogBoxParamW
GetShellWindow
DefDlgProcA
EnumPropsW
GetAltTabInfoA
CloseWindow
GetScrollInfo
GetScrollRange
MenuItemFromPoint
SwapMouseButton
MapVirtualKeyExW
LoadBitmapW
GetScrollPos
CreateDialogParamW
EnumPropsExA
wvsprintfA
CreateCursor
ShowStartGlass
CreateMDIWindowA
WinHelpW
DrawTextA
ChangeDisplaySettingsExW
AdjustWindowRect
InsertMenuW
WaitForInputIdle
ShowWindowAsync
GetClipboardOwner
SetProgmanWindow
OemToCharBuffW
OpenClipboard
CascadeChildWindows
RegisterClipboardFormatW
ModifyMenuA
DialogBoxIndirectParamA
SetScrollPos
SendDlgItemMessageA
IsCharUpperW
EnumDesktopsW
GetIconInfo
ToAscii
SetClassLongA
GetCursorPos
InvalidateRgn
CallMsgFilterW
SetDebugErrorLevel
BeginPaint
GetGUIThreadInfo
EndMenu
SendMessageA
SetWindowsHookExA
SystemParametersInfoW
SendNotifyMessageW
ArrangeIconicWindows
GetMenuStringA
SetMenu
TrackPopupMenu
MessageBoxA
EnumThreadWindows
GetMessageW
CreateIconFromResourceEx
GetMessageTime
DefFrameProcA
SetScrollInfo
ChangeDisplaySettingsW
CloseDesktop
DlgDirSelectExW
LoadMenuW
GetMenuContextHelpId
GetProcessAffinityMask
FlushViewOfFile
GetProcessHeaps
GetCurrentDirectoryA
GetExpandedNameA
lstrlenA
GetCPInfo
FillConsoleOutputCharacterA
SetTapePosition
TryEnterCriticalSection
GetAtomNameA
FindResourceA
AddVectoredExceptionHandler
MulDiv
RequestDeviceWakeup
BuildCommDCBA
IsProcessInJob
DeleteTimerQueueEx
CreateWaitableTimerW
WriteProfileSectionW
GetThreadLocale
GetConsoleCursorInfo
FindFirstChangeNotificationA
GetLocaleInfoW
FatalAppExitA
GetEnvironmentStringsW
SetLocaleInfoW
VirtualLock
EnumResourceLanguagesA
VerifyConsoleIoHandle
CreateSocketHandle
WriteConsoleInputW
FormatMessageA
SetFileShortNameW
SetComputerNameW
FindFirstVolumeA
SetVolumeMountPointA
EnumDateFormatsExA
GetDriveTypeA
VirtualFreeEx
GetUserGeoID
GetCurrentThread
SetStdHandle
CreateProcessInternalA
ClearCommBreak
GetDiskFreeSpaceExA
OutputDebugStringW
SetTimeZoneInformation
EnumSystemGeoID
FoldStringW
WaitCommEvent
MoveFileWithProgressA
HeapCreate
LZInit
GetVersion
TlsGetValue
ResetEvent
SetThreadPriority
WritePrivateProfileSectionA
WriteConsoleOutputA
ReadConsoleInputA
GetLogicalDrives
DosPathToSessionPathW
ReadConsoleInputExW
GetPrivateProfileSectionNamesW
OpenEventW
IsBadReadPtr
TerminateJobObject
GetSystemDefaultLangID
GetShortPathNameW
LocalSize
Heap32ListFirst
SetTimerQueueTimer
CreateMailslotW
RemoveDirectoryW
ClearCommError
QueryDosDeviceA
GetCommState
FreeEnvironmentStringsA
ReplaceFileW
GlobalAddAtomA
EraseTape
WritePrivateProfileSectionW
EnumSystemCodePagesA
IsBadStringPtrW
LeaveCriticalSection
CompareStringA
GetTapePosition
WinExec
lstrcmpA
CopyLZFile
InitAtomTable
lstrcmpiW
HeapUnlock
FindNextFileW
InitializeCriticalSection
OpenFileMappingA
GetDevicePowerState
CreateNamedPipeA
GetConsoleHardwareState
HeapQueryInformation
lstrcpynA
FindAtomW
FlushInstructionCache
FreeLibraryAndExitThread
SetComputerNameExA
PeekNamedPipe
Heap32ListNext
GetEnvironmentStringsA
GetLongPathNameA
GetCPInfoExW
GlobalMemoryStatusEx
GetNamedPipeHandleStateA
VirtualFree
GetThreadPriorityBoost
GetConsoleSelectionInfo
IsProcessorFeaturePresent
GetACP
GlobalFlags
WriteConsoleInputA
FlushFileBuffers
QueryActCtxW
RegisterWowExec
CreateTimerQueue
ReadFileEx
GetExitCodeThread
PeekConsoleInputA
SetSystemPowerState
GetConsoleCharType
VirtualQuery
MoveFileW
EndUpdateResourceW
FindAtomA
WritePrivateProfileStructA
GlobalReAlloc
WaitNamedPipeW
SuspendThread
GetConsoleKeyboardLayoutNameA
DeleteCriticalSection
GetComputerNameExW
LocalReAlloc
GetComputerNameA
GetThreadTimes
WriteFile
GetStartupInfoA
CreateTimerQueueTimer
GetProfileStringA
EnumSystemLanguageGroupsW
WriteFileGather
SetLocaleInfoA
CloseProfileUserMapping
GetPrivateProfileSectionNamesA
DeleteAtom
LZClose
CallNamedPipeA
CreateJobSet
GetLastError
CreateJobObjectA
InterlockedCompareExchange
RaiseException
SetDefaultCommConfigW
GetEnvironmentVariableW
GetCompressedFileSizeA
RtlCaptureContext
OpenJobObjectW
TlsFree
GetMailslotInfo
FindResourceExW
ActivateActCtx
ConnectNamedPipe
FindVolumeClose
SetEndOfFile
FindFirstVolumeW
ShowConsoleCursor
EnumDateFormatsExW
SearchPathA
FileTimeToSystemTime
GetVolumePathNamesForVolumeNameW
GetFileAttributesExA
SetFileAttributesW
GetCurrentDirectoryW
GetPrivateProfileSectionA
QueryPerformanceCounter
LZOpenFileA
QueueUserWorkItem
GetEnvironmentStrings
WaitForMultipleObjects
CopyFileExA
SetCalendarInfoW
lstrcatA
WriteConsoleW
SetMailslotInfo
FindNextVolumeA
SetComPlusPackageInstallStatus
SetLocalTime
BuildCommDCBW
OpenFile
UnregisterWaitEx
SetProcessShutdownParameters
GetThreadPriority
SetFileShortNameA
ConsoleMenuControl
RegisterWaitForInputIdle
AddRefActCtx
FindNextFileA
GetExpandedNameW
AssignProcessToJobObject
RemoveDirectoryA
UnhandledExceptionFilter
TransmitCommChar
GetProfileIntA
DelayLoadFailureHook
FindFirstFileExA
SetVolumeLabelW
GetCommModemStatus
GetConsoleTitleW
GlobalUnlock
SetEnvironmentVariableA
GetModuleHandleExW
LCMapStringA
lstrcpyA
LZSeek
SetLastError
IsBadStringPtrA
SetThreadContext
GetProcessShutdownParameters
GetLogicalDriveStringsW
EnumSystemCodePagesW
CreateFileA
GetFullPathNameA
SetErrorMode
UnregisterWait
SetComputerNameA
CreateSemaphoreW
UnlockFileEx
LZCopy
IsWow64Process
GetCurrentThreadId
GetConsoleMode
BackupRead
SetCurrentDirectoryW
GetSystemDirectoryW
FindVolumeMountPointClose
PulseEvent
GetSystemDefaultLCID
GlobalHandle
GetVolumeNameForVolumeMountPointW
FindActCtxSectionStringW
lstrcmp
RegisterWaitForSingleObject
PrivMoveFileIdentityW
GetFileSize
CreateThread
GetTempPathA
HeapValidate
CreateDirectoryExA
lstrcmpi
CancelIo
SetFileApisToANSI
lstrcpyn
GetThreadContext
LocalCompact
GetSystemPowerStatus
GetFullPathNameW
ResetWriteWatch
GetConsoleFontSize
AddAtomW
MoveFileWithProgressW
FindResourceW
SetThreadLocale
GlobalFree
GetCurrentActCtx
GetModuleHandleW
lstrcpyW
GetConsoleAliasesA
GetCurrentProcessId
FindFirstFileA
InterlockedExchange
EnterCriticalSection
SetEnvironmentVariableW
OpenMutexA
CloseHandle
SetFileApisToOEM
FindNextChangeNotification
GetProfileIntW
GetDriveTypeW
CreateDirectoryExW
CreateFileMappingA
BackupSeek
FindResourceExA
MapViewOfFileEx
GetCurrentConsoleFont
GenerateConsoleCtrlEvent
PrivCopyFileExW
WritePrivateProfileStructW
AddConsoleAliasA
IsBadHugeWritePtr
GetModuleFileNameA
GetComPlusPackageInstallStatus
HeapReAlloc
GetProcessIoCounters
GetNumberFormatW
GetCommProperties
RtlCaptureStackBackTrace
GetModuleHandleA
FreeUserPhysicalPages
GetStartupInfoW
UnlockFile
GetSystemInfo
CreateActCtxW
SetSystemTime
EnumCalendarInfoExW
VirtualUnlock
PrepareTape
CreateHardLinkW
LZRead
SetFilePointer
lstrcmpW
GetNumberOfConsoleFonts
GetLocalTime
SetFileTime
WriteConsoleOutputCharacterA
OpenWaitableTimerA
WaitForSingleObject
Heap32Next
GetDateFormatA
LZStart
GetCalendarInfoA
GetVolumePathNamesForVolumeNameA
GetTimeFormatW
lstrcatW
GetProcessTimes
FileTimeToLocalFileTime
GetDateFormatW
WaitForMultipleObjectsEx
QueryPerformanceFrequency
InterlockedIncrement
GetNamedPipeInfo
LocalFree
WriteConsoleOutputW
ReadConsoleOutputCharacterA
GetConsoleProcessList
GetBinaryTypeW
CopyFileA
GetProcessHeap
GetUserDefaultLCID
GetConsoleWindow
HeapWalk
GlobalUnWire
IsValidLocale
GlobalAddAtomW
IsBadHugeReadPtr
GetModuleFileNameW
GlobalMemoryStatus
MoveFileExW
GetBinaryTypeA
TlsSetValue
SetInformationJobObject
SearchPathW
FindClose
CreateJobObjectW
DeleteVolumeMountPointA
MultiByteToWideChar
GetTimeZoneInformation
GlobalLock
CreateNamedPipeW
DeleteFileA
FindFirstChangeNotificationW
GetFileSizeEx
SetPriorityClass
lstrlenW
ConvertDefaultLocale
ReleaseSemaphore
GlobalFix
CreateMemoryResourceNotification
Heap32First
SetUserGeoID
GlobalSize
SetLastConsoleEventActive
GetCurrentProcess
GetVersion
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
OleCreateDefaultHandler
CreateBindCtx
IsValidIid
CreatePointerMoniker
GetHookInterface
HACCEL_UserFree
HMETAFILE_UserUnmarshal
StgCreatePropSetStg
HICON_UserSize
CoFileTimeToDosDateTime
WriteClassStg
IsValidPtrIn
OleDoAutoConvert
CoInvalidateRemoteMachineBindings
PropVariantClear
UpdateDCOMSettings
HDC_UserSize
GetFileTitleA
FindTextW
dwLBSubclass
ReplaceTextW
LoadAlterBitmap
GetSaveFileNameW
DllUnregisterServer
VariantTimeToDosDateTime
VarUI4FromCy
VarBoolFromI4
GetActiveObject
VarI1FromStr
VarUI1FromDate
DispInvoke
BSTR_UserFree
SHParseDisplayName
DllInstall
DllUnregisterServer
SHExtractIconsW
ShellExec_RunDLLW
RealShellExecuteW
SHGetNewLinkInfo
SHCreateDirectoryExW
ShellAboutA
SHGetFileInfo
DllGetVersion
PrintersGetCommand_RunDLL
DragQueryFileAorW
SHGetDiskFreeSpaceExW
FindExecutableW
SHBrowseForFolderA
Shell_NotifyIconW
DragQueryFileA
DeleteFormW
GetPrinterDriverW
CloseSpoolFileHandle
FreePrinterNotifyInfo
Ellipse
GetCharABCWidthsW
GetTextExtentExPointW
EngMultiByteToUnicodeN
ImageList_Draw
ImageList_DrawIndirect
ImageList_SetOverlayImage
CreateUpDownControl
ImageList_DragLeave
CreatePropertySheetPageW
ImageList_Read
ImageList_DrawEx
ImageList_Write
GetMUILanguage
FlatSB_SetScrollPos
FlatSB_GetScrollPos
MakeDragList
ImageList_GetDragImage
InitializeFlatSB
DrawStatusText
ha����ה�l��3�4,��X2�zCꂅ�3�=�[ I�"�ys� �Ě 5]_b�����6��0��wP,P텬�6����~��~rB�lTV4����{�Yس���t��m���'����I6�x)t���o���l���ۙYVE��6������U���>��S}�1��#.|r�w��, �T�u����HS6Qk�C�Ԡ�����7j[���>���Ne ��(�3L)�x�T��\�!��3j�t��1:�2���1�;4!��\��L5Nk ���X'��W�u=���n�F]9��5Ơa��<7'��44w�4��=���RŅxS�0���������Wc�R�#� �z����U7����ʿ_��vw����/��Ɖ,��3���Qʭ.y��UbT�ýJ.�M6�<s��m��C��DJg�\1�<��4<�c�͏�j=�7�nudS�7��:C����DY�N"�������.�.d{�S����HF�?<<���Ԛ;�����#����� �1�'?Me�����8[\KӃ��r�o�{���x� ��B%�<"$d����q��|u ���%Om��\5��t���~vC�#1 [>Dț�mk��4��e>WADfY��Ѳԋ�z�*"h��Ff�<)�$_\a�s>�N�=!�*q!ZVd��`92��>:.��x?��k�!˘��lq��d�~=p�"ۮS>�aF�KJ���!fa$"�ܑk%�����4|�����v�>�{�A����e7X�9� w�2��O��VsQ>��,^}��sFÕ��Y����JEqm(�E�o���}Y;���5�эlb�55��ƂRFm<L2��]���4�����T{��j�$�*z��e�)o�'X.B@��G�𝌽¿9Ei4� y)��]K�X��z5�w�Yu�,�$��28�����-р����s^ƌ�K8)s�Dk��ƥ`�ੂt�=�m��� MyV�Wr'��: lK�OB1���Y��#$Ͼ����%��1Ṁ�a�?�� �Ql��M{������yOaٌ2~./�V'�~I�s��U����u/�l�7��?�hrS�����:�B�� �3��y���J��c�NG��1�Q/~'\4W}눂B"�� ��2B�Q�,�I_�}F�5%�E*}D���!�(��T<M���KJ�!�D�-3sw�~}�tꝖ�<.�jo��Q�� ?p���qH�Kz��Pn�~i�c��B�3$�*U\u�}��H�G{#v�<l���ջ,О�T%���=��k7H��_k0J��4��ʁ�^"��y����i���-i��9k���d�N��H�7f�]:Dil�W���^c;ǃ!���@��*�?����L S!1���-le��3��Tr�0x����a�-7Zh�A�Ɯ�5�� �mY@�>�t�V��n#��),�P���c� ]R��Q �*k��IUw���M�LZ F�`��Y����j]K�'� 0H�"b�N"]��r�����' �����c���z`����P�h�FF�C�*�=��� Z0+�{^��|(A�����v�2�Ӧ8�3��j�������� !Ð��?���S�H��f왏-�����yV����&��{W�]����1�~B_�(K���j�����P��x8˨r}�Q�.��k�"t��pbH��M�[���I��j���z "ڡRR��GPݗr�^1��c�M^�MA��\L(�[ڼJ�=3�Yꯊ��C��vrH�e�$�@�)9���t���+2 I�}=9:jc�|M�%4j5�׆�?o?m�1I��#�A����f������`]��rB���[:l��p�~���j?"�\���������0Q��v�'$��l���?֔�nL0�c��E _s!�>4# ,[��z�co?����-S� x��B�UW�����EHK0kD� ��V�*]��5'��*Ie���.�P�L�f3R���W����U�������>^ ��,/�D�Q!�>��8s0��\;�����Ԥ� �t>�A�Xo c3Y%j��F�Ste�;��r3&�x-eP89,s�t���`��1��xn�S���t;8)�:_�[�|�'�VO�S��M*h���fu��۴2����٬gD�.���@=_��z2VK��⒭ez�N{<���6��HU�,��h�n��ְB��uaE�$��r��T^��bI�~��T]�Z�<�$������x p=]7*C=!v���7���h���<`!Z*ݝh���&q b��#3��vo��m�ax�"mNh�����7�^i�ո�A)���V��ܰ�1"e��[�2߽���佈����@���k �y���[������Z�m�(�p➱��:zh=�FkZ2����f�c�&ㆱ�)��vo����ɞ1;�������KgEY�b���2��D�*6�6�y�� ��T�B�.,�Z�}Y�I�Y1(�f���:�@�_�l(�cYG�篋*`��ZL��A��NK�Hoѩ��R��k���6Q����>�[&��d�g]��Akа ҅ :��MI���6��~����C�yAtяB��3mHn�^��;���١47�ur�8<oe��&���jdƨ߭�u|{��+�ֶ������i���L����N������q5q"*6�"�U'h�^t�vұ�m��s���iI�߮��R�].�����G�c9X�s�{G������1�Z#a]o�,uγ���Ǩ�08�=�_m���F�P���ϡoY/���c���������:#�S�F1=���z��ӊi�W!����[�|�8������������ۮ1v��1,���B��e>��.�AH�˖�(g�k~T�5_�E?�A��~T$J6�k��-���d4���E��)d\�b̬�U��m��ZP�oZ�0��CdžR^���ݡ�V�5�K$mH��tP���;�8�Iz����j���mH S�<�ֲ���8��=o�%�< 8�!j�& ��\Y�� !�K/(�3�wyH6��=��ۋ E�����8�lrJ8����'��U�wHvUځlܨ v��k�#����e�n�:��=p
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ